Red Hat Security Advisory: libguestfs-winsupport security update

Fixed packages 1

Vulnerabilities 5

• Medium 6.7
  CVE-2022-30784

  A crafted NTFS image can cause heap exhaustion in ntfs_get_attribute_value in NTFS-3G through 2021.8.22.

  ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  May 26, 2022
• Medium 6.7
  CVE-2022-30786

  A crafted NTFS image can cause a heap-based buffer overflow in ntfs_names_full_collate in NTFS-3G through 2021.8.22.

  ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  May 26, 2022
• Medium 6.7
  CVE-2022-30788

  A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

  ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  May 26, 2022
• Medium 6.7
  CVE-2022-30789

  A crafted NTFS image can cause a heap-based buffer overflow in ntfs_check_log_client_array in NTFS-3G through 2021.8.22.

  ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  May 26, 2022
• Unscored —
  CVE-2021-46790

  ntfsck in NTFS-3G through 2021.8.22 has a heap-based buffer overflow involving buffer+512*3-2. NOTE: the upstream posit…

  ntfs-3g ntfs-3g ntfs-3g ntfs-3g Debian Ubuntu Azure Linux Alpine
  May 2, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/9/html/9.2_release_notes/index
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093314
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093326
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093340
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093348
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2093358
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2179.json
• report
  https://access.redhat.com/security/cve/CVE-2021-46790
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-46790
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-46790
• advisory
  https://github.com/advisories/GHSA-274j-jr8v-77f7
• report
  https://access.redhat.com/security/cve/CVE-2022-30784
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30784
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30784
• advisory
  https://github.com/advisories/GHSA-mr29-g89m-5w7h
• report
  https://access.redhat.com/security/cve/CVE-2022-30786
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30786
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30786
• advisory
  https://github.com/advisories/GHSA-7wwc-f3r7-9qqw
• report
  https://access.redhat.com/security/cve/CVE-2022-30788
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30788
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30788
• advisory
  https://github.com/advisories/GHSA-cq26-r6qj-8656
• report
  https://access.redhat.com/security/cve/CVE-2022-30789
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-30789
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-30789
• advisory
  https://github.com/advisories/GHSA-m552-m2c9-9wj8